statements.
4. Information and Communication. The internal and external reporting process,
and includes an assessment of the technology environment.
5. Monitoring. Assessing the quality of a company’s internal control over time
d. The Enterprise Risk Management (ERM)-An Integrated Framework is the undated
EXERCISE 4-2
1. Separation of Duties: Whenever possible, the functions of authorization, recording,
2. Quality of Employees: Employees should be competent and adequately trained to
perform the required task.
3. Bonded Employees: Employers should hire employees with high personal integrity.
4. Periods of Absence: Employees should be required to take extended vacations
and/or be rotated among duties in order to discover patterns of dishonesty or theft.
5. Procedures Manual: A procedures manual should be established, kept up-to-date,
being followed.
6. Authority and Responsibility: A clear chain of command should be established and
for specific and general authority.
7. Prenumbered Documents: The use of prenumbered documents (checks, receipts,
8. Physical Control: All assets should be properly documented, and periodically
accounted for, with access limited to authorized personnel.